Quick answer
EC Paraguay uses your personal data only to answer your enquiry and carry out the service you hire us for. We share it only with the public bodies involved in your procedure and with the providers we need, we do not sell data, we do not use tracking cookies, and we delete copies of personal documents once the procedure is complete. To request access, correction or deletion, write to ecparaguay5@gmail.com.
This privacy policy explains how EC Paraguay handles the personal data of people who visit the website, contact us through the form, WhatsApp or email, or hire us for a residency, ID card, company, legal representation or accounting service. It applies from 24/09/2026 and follows the principles of Paraguay's data protection law. When the data subject is located in Brazil, Brazil's LGPD (General Data Protection Law) also applies.
Who is responsible for your data?
The controller of your data is EC Paraguay, with offices at Km. 9 Monday, Calle Av. 2000 · Ciudad del Este · Alto Paraná · Paraguay, RUC (Paraguayan tax ID) to be confirmed. For any privacy matter, including exercising your rights, write to ecparaguay5@gmail.com with the subject line "Privacy". That is the contact channel for the person in charge of data protection.
| Detail | EC Paraguay |
|---|---|
| Controller | EC Paraguay |
| Address | Km. 9 Monday, Calle Av. 2000 · Ciudad del Este · Alto Paraná · Paraguay |
| RUC (tax ID) | to be confirmed |
| Privacy channel | ecparaguay5@gmail.com, subject "Privacy" |
| Phone / WhatsApp | +595 981 898 742 |
What personal data does EC Paraguay collect?
We collect only the data needed to reply to you and carry out your procedure: your contact details and the message you send; and, for a service you hire, the documents the public body requires, such as your passport or identity document, civil records and criminal record certificates. On the website we do not use tracking cookies, analytics tools or advertising pixels.
| When | What data | Note |
|---|---|---|
| Website form | Name, email, WhatsApp, subject, message, the page you wrote from and the consent checkbox | Do not send documents through the form |
| WhatsApp and email | Number, profile name, message content, files you send and the page of origin, when the pre-filled message mentions it | The message also passes through the platform you use (for example, WhatsApp) |
| Immigration procedures (residency, cédula, DTVF) | Identity document or passport, birth and marital status certificates, criminal record certificates, proof of entry into the country, address in Paraguay and, for permanent residency, the proof of financial means for your category (income, IPS, RUC, pension, property) | We ask only for what the DNM (immigration authority) or Identificaciones (the National Police ID card department) requires in your case |
| Company, legal representation and accounting | Details of the shareholders and the representative, powers of attorney, bylaws, the company's tax and accounting data, beneficial owners | Required by SUACE, the DNIT (tax authority), the RUN (national registry), the IPS (social security) and other public bodies |
| Family | Details of the spouse and children included in the procedure | Data about minors only with the authorisation of at least one parent or the legal guardian |
| Browsing the website | IP address, browser, date and time of access, logged by the hosting provider and the web font service | Technical data; we do not use it to build profiles |
We do not ask for data about health, religion, political opinions or sexual orientation. The data capture for the cédula (Paraguayan identity card) is carried out directly by Identificaciones of the National Police, not by EC Paraguay.
Why do we use your data and on what legal basis?
We use your data to answer your enquiry, prepare a quote, carry out the service you hired, meet EC's legal obligations in Paraguay and keep the website secure. Each use has a legal basis: your request or the contract, a legal obligation, your consent or a narrowly defined legitimate interest. If you are in Brazil, article 7 of the LGPD also applies.
| Purpose | Legal basis | Equivalent LGPD basis (data subjects in Brazil only) |
|---|---|---|
| Answer your enquiry and send a quote | Your request and your consent in the form | Art. 7, V and I |
| Carry out the service you hired and file documents with public bodies | Performance of a contract to which you are a party | Art. 7, V |
| Issue invoices and meet EC's tax and accounting obligations in Paraguay | Legal obligation | Art. 7, II |
| Keep evidence to defend rights in administrative or judicial proceedings | Exercise of rights | Art. 7, VI |
| Website security and abuse prevention (technical logs) | Legitimate interest, with minimal data | Art. 7, IX |
| Send updates on regulatory changes | Only with your specific consent, which you can withdraw at any time | Art. 7, I |
We do not make automated decisions about you or use your data for advertising. If you do not provide information that the public body requires, we cannot carry out the procedure; we will tell you beforehand.
Which laws apply?
In Paraguay, Law No. 7593/2025 on Personal Data Protection was enacted on 27/11/2025 and comes into force 24 months after its official publication (art. 57); in June 2026 its implementing regulations were still pending. Even so, we already follow the principles in its article 4: lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, fairness and transparency, security and confidentiality.
If you are located in Brazil, the LGPD (Law 13.709/2018) also applies, because it covers foreign companies when the processing aims to offer or provide services to people in Brazil (art. 3, II). EC Paraguay serves clients who still live in Brazil, so it complies with both laws for them. For data subjects outside Brazil, the references to the LGPD in this policy do not apply.
Who do we share your data with?
We share your data only with the public bodies involved in your procedure and with the providers we need to deliver the service. We do not sell, rent or hand over data for advertising purposes. Client cases are published only with written authorisation and in anonymised form.
- Public bodies involved in the procedure: the Dirección Nacional de Migraciones (DNM), Identificaciones of the National Police, the DNIT, the MIC (Ministry of Industry and Commerce) and SUACE, the RUN, the IPS and the MTESS (Ministry of Labour, Employment and Social Security), depending on the service.
- Professionals the procedure requires: a notary (escribano) and, when a public body requests it, a registered public translator.
- Banks: only when you ask us to introduce your company or assist with opening an account.
- Technology providers: website hosting, email, form, messaging (such as WhatsApp) and cloud storage. They process data on our behalf or under the terms of their own services, and we share only what is necessary.
- Authorities: when there is a court order or a legal obligation.
Does your data leave your country?
If you write to us from another country, your data reaches Paraguay, where EC Paraguay operates. For data subjects in Brazil, the LGPD allows that transfer when it is needed to perform the contract or the preliminary steps you requested, to comply with a legal obligation or to exercise rights (art. 33, IX). Some technology providers store data on servers in other countries.
We choose services with recognised security measures and limit what we send them. If a transfer ever depended solely on your consent, we would ask for it specifically and prominently.
How long do we keep your data?
We keep each piece of data only as long as its purpose lasts. Copies of personal documents from the procedure, such as passports, civil records and criminal record certificates, are deleted after it ends, unless you ask us to keep them for a next step or a legal obligation applies. Tax records follow the period set by Paraguayan law.
| Type of data | Retention period |
|---|---|
| Enquiry without hiring (form, WhatsApp, email) | Up to 12 months after the last contact; then deleted |
| Copies of personal documents from the procedure (passport, identity document, civil records, criminal record certificates) | During the procedure and up to 90 days after it ends; then deleted. Originals are returned to you |
| Documents you ask us to keep (for example, to apply for permanent residency from 90 days before your temporary residency expires) | Until the date agreed with you, with written authorisation |
| EC's contracts, invoices and accounting records | For the period required by Paraguayan tax and commercial law |
| Data of legal representation and accounting clients | For the duration of the contract and then for the legal retention period |
| Technical website logs | For the short period set by the hosting provider |
How do we protect your documents?
We ask only for the documents the public body requires, limit access to the people working on your case and delete copies once they are no longer needed. Do not use the website form to send documents: we will agree on a channel with you. If a security incident creates a relevant risk, we will inform you.
When the data subject is in Brazil and the LGPD requires it (art. 48), the incident is also reported to the ANPD. No one from EC Paraguay will ever ask you for passwords, verification codes or payment of "fees" other than the official ones; if in doubt, confirm through the channels on this page.
What are your rights and how can you exercise them?
At any time you can request access to your data, correction, updating, deletion, objection to processing, portability where applicable, and information about who we share it with; you can also withdraw your consent. Write to ecparaguay5@gmail.com with the subject line "Privacy"; we reply within 15 days at most.
- Access: find out whether we process your data and receive a copy.
- Correction and updating: fix incomplete, inaccurate or outdated data.
- Deletion: erase unnecessary or excessive data, or data processed without a legal basis, unless the law requires us to keep it.
- Objection: object to processing based on legitimate interest.
- Portability: receive your data to take it to another provider, where applicable.
- Withdrawal of consent, without affecting what was done before.
- Complaint: if you are not satisfied with our reply, you can contact the competent authorities in Paraguay and, if you are in Brazil, the ANPD (LGPD, art. 18).
To protect you, we may ask you to confirm your identity before providing or deleting data. Requests are free of charge.
How does the chat assistant work?
The website's chat assistant answers using Google's artificial intelligence (the Gemini API). What you type in the chat is sent to Google to generate the answer and is not stored on EC Paraguay's servers; the conversation stays only in your browser (sessionStorage) until you close the tab. Google processes that data under the Gemini API terms. Do not type sensitive personal data in the chat, such as document numbers, health data or criminal records. Answers are generated automatically, may contain errors and do not replace an analysis of your case.
Does the website use cookies?
We do not use tracking cookies, analytics tools or advertising pixels. The document checklist saves your ticks in your browser's local storage (localStorage). That data stays only on your device and never reaches us; you can delete it by clearing the site data in your browser.
The pages load fonts from Google Fonts. To do so, your browser connects to Google's servers, which receive your IP address and technical details of the request. The hosting provider also logs technical access data to keep the website running and secure.
What about data of children and teenagers?
We process data about minor children only when they are part of a family procedure, such as residency, with the authorisation of at least one parent or the legal guardian, and always in the best interests of the child or teenager. If the family is in Brazil, article 14 of the LGPD also applies. We ask only for the documents the DNM requires.
What happens if this policy changes?
When this policy changes, we will publish the new version on this page with the new effective date. If the change significantly affects how we use the data of clients with procedures in progress, we will notify them through the contact channel they use with us.
Version in force since 24/09/2026. See also our office in Ciudad del Este.
Official sources
We checked each figure against these sources on the update date. Rules change: always confirm the current version.
General information, updated on the date shown. It does not replace a review of your case by a licensed professional.